Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Larry Sullivan
07-24-2019
Stats
Member since
05-27-2017
132
Posts
80
Helpful
11
Solutions
07-16-2019
02:53 PM
I know timeout plays a role, but I'm also trying to determine if any of the jitter parameters can trigger SLA down, which I don't think it does. This would definitely trigger on a link fail as that would timeout the SLA after the 1000ms. so my guess is although the is a path-jitter SLA and it gives you jitter statistics, it only goes into the down state when it doesn't get a reply from one of it's echo probes within 1000ms.
... View more
07-16-2019
02:25 PM
Hi, I'm trying to figure out what exactly is triggering our Path-jitter SLA. My understanding is that it is based on the 1000 ms timeout we configured. I'm also being told that there is some default value for jitter that triggers the SLA to be down. This came up because a few milliseconds in latency changes on our circuit path is triggering the SLA. Can anyone confirm if it's strictly the configured timeout time or if this also triggers off a default jitter value? Thanks. ip sla 11 path-jitter x.x.x.x source-ip x.x.x.x targetOnlysla, ip, WAN, Other Routing verify-data threshold 1000 timeout 1000 frequency 10 ip sla schedule 11 life forever start-time now
... View more
Labels:
05-16-2019
06:21 PM
Let's say traffic is at 60 Gbps and that all downlinks on SW1 are on the same card, that card fails, traffic goes to the standby SW2 and hits that 40 Gbps cross connect between SW1 and 2... then what? (This is more a mental exercise. I'm not sure how you have this part set up and hoping all links aren't on the same card).
... View more
Created by
Larry Sullivan
in Network Management
in Network Management
04-02-2019
05:47 PM
04-02-2019
05:47 PM
I would think you would be able to do this. debug EEM and run this again and see what the debugs say.
... View more
Created by
Larry Sullivan
in Switching
in Switching
03-23-2019
05:21 PM
03-23-2019
05:21 PM
Strange indeed. 1/0/3 and 1/0/8 on the Core switch have the same MAC address coming in?
... View more
Created by
Larry Sullivan
in Switching
in Switching
03-22-2019
04:51 PM
03-22-2019
04:51 PM
Sounds like a routing issue. Is the L2 SVI subnet on a different subnet than the devices plugged into the L2 switch? Look into whether or not the SVI (management IP) subnet is being advertised across to site A.
... View more
Created by
Larry Sullivan
in Network Management
in Network Management
03-22-2019
04:44 PM
03-22-2019
04:44 PM
Can you try manually configuring "snmp trap link-status" on an interface and triggering it? Keep debug running and monitored. Also, do you have link traps working on another 2950 in your network?
... View more
03-21-2019
04:27 PM
Did you try adding "ip nhrp map multicast dynamic" on spokes and hub? What does "show dmvpn" say? Is EIGRP peering between the two established?
... View more
03-12-2019
01:54 PM
Deepak,
BGP is reliant upon the DMVPN so is on top of it. DMVPN goes down, then yes, the BGP goes down as well. What you are seeing is BGP returning after it and DMVPN being down due to mentioned issue. At this point my suggested next step is to upgrade the DSL speeds (1.5 Mbps DL and 768Kbps UL). We had a similar issue with another site that got resolved by upgrading speeds. If that doesn't work then I'm going to suggest a new provider. I will update with results of speed upgrade.
... View more
03-09-2019
02:26 PM
So I got the modem replaced and it stabilized for several days and then the issue returned. DMVPN/BGP goes down for a bit then comes back.
Mar 9 14:21:22: IPSEC(send_delete_notify_kmi): not sending KEY_ENGINE_DELETE_SAS Mar 9 14:21:22: IPSEC(ERROR): [ident_update_final_flow_stats] Peer index node NULL for peer index 0 when corresponding flow id 0x140001FD was completed
Mar 9 14:21:23: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
Mar 9 14:21:23: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
Mar 9 14:21:23: IPSEC(ipsec_get_crypto_session_id): Invalid Payload Id Mar 9 14:21:57: IPSEC(sibling_delete_notify_ident_action): Ident down, not sending DECR/DELETE Mar 9 14:21:57: IPSEC(ERROR): [ident_update_final_flow_stats] Peer index node NULL for peer index 0 when corresponding flow id 0x140001FF was completed
Mar 9 14:21:57: IPSEC(ERROR): Failed to remove SADB 0x1080A318 from sadb_root_avl_tree Mar 9 14:21:59: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF Mar 9 14:21:59: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON Mar 9 14:21:59: insert of map into mapdb AVL failed, map + ace pair already exists on the mapdb Mar 9 14:21:59: IPSEC(ipsec_get_crypto_session_id): Invalid Payload Id Mar 9 14:23:12: IPSEC(send_delete_notify_kmi): not sending KEY_ENGINE_DELETE_SAS Mar 9 14:23:12: IPSEC(ERROR): [ident_update_final_flow_stats] Peer index node NULL for peer index 0 when corresponding flow id 0x14000201 was completed
Mar 9 14:23:19: IPSEC(ERROR): crypto_notify_rp Rejected notify RP, elapse time 0 < 1000
Mar 9 14:23:19: IPSEC(ipsec_get_crypto_session_id): Invalid Payload Id
Mar 9 14:23:29: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up
... View more
Created by
Larry Sullivan
in Switching
in Switching
03-02-2019
03:07 PM
03-02-2019
03:07 PM
Looks like you're right, there are many more interfaces with high discards and they are all 4/x. Why every 15 minutes on the dot though is strange. No QoS, default.
... View more
Created by
Larry Sullivan
in Switching
in Switching
03-02-2019
03:04 PM
03-02-2019
03:04 PM
Different devices, and I can't configure 100 Mbps as the traffic on the interfaces are over 100Mbps.
... View more
Created by
Larry Sullivan
in Switching
in Switching
03-02-2019
01:19 PM
03-02-2019
01:19 PM
Hi,
I am getting many transmit discards on 6509 interfaces on a specific vlan every 15 minutes, generally within a minute of 3:00, 3:15, 3:30 ect... I have confirmed these discards are impacting video traffic on that vlan. We get a burst of CC errors at those times the discards increment. Wondering if anyone has had this issue before, or knows what type of service occurs every 15 minutes that could be bursting? Just doesn't make sense. The discards are equal across trunk interfaces, no other errors occur. These interfaces are connected to 3750/3560 with no errors or discards on the the 1Gb interfaces.
#6509 s int g4/26 GigabitEthernet4/26 is up, line protocol is up (connected) Hardware is C6k 1000Mb 802.3, address is 0015.2bfc.ceb1 (bia 0015.2bfc.ceb1) Description: Multiviewer Video Switch MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 9/255, rxload 46/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT input flow-control is off, output flow-control is off Clock mode is auto ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:34, output 00:00:43, output hang never Last clearing of "show interface" counters 01:49:59 Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 899171 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 181054000 bits/sec, 16566 packets/sec 5 minute output rate 38911000 bits/sec, 3697 packets/sec 109682946 packets input, 149806385250 bytes, 0 no buffer Received 109672306 broadcasts (109668625 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 24110121 packets output, 31846536069 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 PAUSE output 0 output buffer failures, 0 output buffers swapped out
3560 GigabitEthernet0/50 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 001d.703b.8e32 (bia 001d.703b.8e32) Description: uplink to Optimus_65000 MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 46/255, rxload 9/255 Encapsulation ARPA, loopback not set Keepalive not set Full-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000BaseTX SFP input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:09, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 38743000 bits/sec, 3712 packets/sec 5 minute output rate 180945000 bits/sec, 16584 packets/sec 254853961789 packets input, 338401325653985 bytes, 0 no buffer Received 254349424484 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2748471090 multicast, 0 pause input 0 input packets with dribble condition detected 1041656017536 packets output, 1422460209826163 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 PAUSE output 0 output buffer failures, 0 output buffers swapped out
6509 s int g4/28 GigabitEthernet4/28 is up, line protocol is up (connected) Hardware is C6k 1000Mb 802.3, address is 0015.2bfc.ceb3 (bia 0015.2bfc.ceb3) Description: Multiviewer Video Switch MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 24/255, rxload 87/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT input flow-control is off, output flow-control is off Clock mode is auto ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:02, output 00:00:23, output hang never Last clearing of "show interface" counters 01:50:30 Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 899171 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 341675000 bits/sec, 31275 packets/sec 5 minute output rate 95133000 bits/sec, 8960 packets/sec 206425809 packets input, 281947121946 bytes, 0 no buffer Received 206409333 broadcasts (206404946 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 58713634 packets output, 78109010931 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 PAUSE output 0 output buffer failures, 0 output buffers swapped out
3750 GigabitEthernet1/0/48 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is f025.7250.bf30 (bia f025.7250.bf30) Description: Uplink to Optimus_6500 MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 87/255, rxload 24/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 3y32w Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 95469000 bits/sec, 8997 packets/sec 5 minute output rate 342085000 bits/sec, 31325 packets/sec 255704357662 packets input, 339898282855373 bytes, 0 no buffer Received 241340027273 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 81415712 multicast, 0 pause input 0 input packets with dribble condition detected 2197561502342 packets output, 3001359042730041 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 PAUSE output 0 output buffer failures, 0 output buffers swapped out
... View more
Labels:
02-23-2019
04:13 PM
As a continuation from my previous post, issue is still occurring. And to Deepak, we have literally a couple hundred sites working fine in tunnel mode. I will attempt to put this site in transport mode though and see how that goes. Thanks.
Edit: Won't work without changing hub side too, so not worth taking down all these tunnels because one site isn't working.
... View more
02-22-2019
02:06 PM
Yes, they are unique, and the ip nhrp map multicast dynamic are old configs from whoever implemented the tunnels. They don't really affect anything so they are left in place. Currently I reduced the IP MTU and ip tcp adjust-mss to minimums and the tunnels have been stable since. I'll need another several hours to be for sure, but this leads me to believe it is an issue with the modem.
... View more
07-16-2019
I know timeout plays a role, but I'm also trying to determine if any of
the jitter parameters can tr...
07-16-2019
Hi, I'm trying to figure out what exactly is triggering our Path-jitter
SLA. My understanding is tha...
06-14-2019
NSFD_TCP is the name Firepower has when you search TCP port 49. Before
that I used just the manual p...
06-13-2019
I've attached a snip of it to my first post. Not sure if there is a way
to export a text example.
06-12-2019
Hi,I have rule 23 that allows all private IP address (IPv4 RFC1918 group
object) to use ICMP and use...
05-16-2019
Let's say traffic is at 60 Gbps and that all downlinks on SW1 are on the
same card, that card fails,...
Created by
Larry Sullivan
in Network Management
04-02-2019
04-02-2019
I would think you would be able to do this. debug EEM and run this again
and see what the debugs say...
Created by
Larry Sullivan
in Switching
03-22-2019
03-22-2019
Sounds like a routing issue. Is the L2 SVI subnet on a different subnet
than the devices plugged int...
Created by
Larry Sullivan
in Network Management
03-22-2019
03-22-2019
Can you try manually configuring "snmp trap link-status" on an interface
and triggering it? Keep deb...
03-21-2019
Did you try adding "ip nhrp map multicast dynamic" on spokes and hub?
What does "show dmvpn" say? Is...
03-12-2019
Deepak, BGP is reliant upon the DMVPN so is on top of it. DMVPN goes
down, then yes, the BGP goes do...
03-09-2019
So I got the modem replaced and it stabilized for several days and then
the issue returned. DMVPN/BG...
Created by
Larry Sullivan
in Switching
03-02-2019
03-02-2019
Looks like you're right, there are many more interfaces with high
discards and they are all 4/x. Why...
Created by
Larry Sullivan
in Switching
03-02-2019
03-02-2019
Different devices, and I can't configure 100 Mbps as the traffic on the
interfaces are over 100Mbps.
Public Statistics
| Date Registered | 05-27-2017 12:58 PM |
| Date Last Visited | 07-24-2019 10:17 AM |
| Total Messages Posted | 132 |
| Total Helpful Votes Received | 80 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 20 | |
| 5 | |
| 10 | |
| 5 | |
| 15 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Guru"){kind=icon}
